下载者下载列表中的样本 1

xueyao_zhjyl

我要积分  

yangpoquan

查杀，直接拦截

lsyer

--> 2\1.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> 2\10.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\11.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\12.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\13.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\14.exe
      [DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
    --> 2\15.exe
      [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
    --> 2\2.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\3.exe
      [1] Archive type: RSRC
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\4.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\5.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\6.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\7.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\8.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan
    --> 2\9.exe
      [DETECTION] Is the TR/Vundo.Gen Trojan

xueyao_zhjyl

还要加油啊

hj5abc

miss one.

G:\2\1.exe infected with Trojan.PWS.Wsgame.12828
G:\2\10.exe packed by UPX
>G:\2\10.exe packed by BINARYRES
>>G:\2\10.exe packed by RLPACK
>>>G:\2\10.exe infected with Trojan.MulDrop.origin
G:\2\11.exe packed by UPX
>G:\2\11.exe packed by BINARYRES
>>G:\2\11.exe packed by RLPACK
>>>G:\2\11.exe packed by BINARYRES
>>>>G:\2\11.exe packed by PECOMPACT
>>>>>G:\2\11.exe infected with Trojan.MulDrop.origin
G:\2\12.exe packed by UPX
>G:\2\12.exe packed by BINARYRES
>>G:\2\12.exe packed by RLPACK
>>>G:\2\12.exe infected with Trojan.MulDrop.origin
G:\2\13.exe packed by UPX
>G:\2\13.exe packed by BINARYRES
>>G:\2\13.exe packed by RLPACK
>>>G:\2\13.exe infected with Trojan.MulDrop.origin
G:\2\14.exe packed by UPACK
>G:\2\14.exe infected with Trojan.PWS.Gamania.19807
G:\2\15.exe packed by UPX
>G:\2\15.exe packed by BINARYRES
>>G:\2\15.exe - OK
G:\2\2.exe packed by UPX
>G:\2\2.exe packed by BINARYRES
>>G:\2\2.exe packed by RLPACK
>>>G:\2\2.exe infected with Trojan.MulDrop.origin
G:\2\3.exe packed by BINARYRES
>G:\2\3.exe packed by RLPACK
>>G:\2\3.exe infected with Trojan.MulDrop.origin
G:\2\4.exe packed by UPX
>G:\2\4.exe packed by BINARYRES
>>G:\2\4.exe packed by RLPACK
>>>G:\2\4.exe infected with Trojan.MulDrop.origin
G:\2\5.exe packed by UPX
>G:\2\5.exe packed by BINARYRES
>>G:\2\5.exe packed by RLPACK
>>>G:\2\5.exe infected with Trojan.MulDrop.origin
G:\2\6.exe packed by UPX
>G:\2\6.exe packed by BINARYRES
>>G:\2\6.exe packed by RLPACK
>>>G:\2\6.exe packed by BINARYRES
>>>>G:\2\6.exe packed by PECOMPACT
>>>>>G:\2\6.exe infected with Trojan.MulDrop.origin
G:\2\7.exe packed by UPX
>G:\2\7.exe packed by BINARYRES
>>G:\2\7.exe packed by RLPACK
>>>G:\2\7.exe infected with Trojan.MulDrop.origin
G:\2\8.exe packed by UPX
>G:\2\8.exe packed by BINARYRES
>>G:\2\8.exe packed by RLPACK
>>>G:\2\8.exe packed by BINARYRES
>>>>G:\2\8.exe packed by PECOMPACT
>>>>>G:\2\8.exe infected with Trojan.MulDrop.origin
G:\2\9.exe packed by UPX
>G:\2\9.exe packed by BINARYRES
>>G:\2\9.exe packed by RLPACK
>>>G:\2\9.exe infected with Trojan.MulDrop.origin

悠柚

14 to IObit

leonfg

eset miss 1
2009-8-19 15:47:11        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\9.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:10        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\8.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:10        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\7.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:09        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\6.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:09        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\5.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:09        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\4.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:08        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\3.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:08        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\2.exe        Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:08        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\15.exe        a variant of Win32/TrojanDropper.VB.NJG trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:07        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\14.exe        a variant of Win32/PSW.QQPass.NEH trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:06        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\13.exe        Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:06        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\12.exe        Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:05        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\11.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.
2009-8-19 15:47:05        Real-time file system protection        file        C:\Documents and Settings\GUNDAM\桌面\2\10.exe        a variant of Win32/PSW.OnLineGames.OMW trojan        cleaned by deleting - quarantined        GAOFANG\GUNDAM        Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe.

幸福的猪猪

卡巴斯基不能识别4个，已经上报过去，给予查杀。

0000

McAfee VirusScan Enterprise + Spyware Enterprise 8.7i

2009/8/19        下午 04:00:10        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\1.EXE        Artemis!0BE598E4D294 (特洛伊病毒程式)
2009/8/19        下午 04:00:16        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\10.EXE        Artemis!989983ED1D80 (特洛伊病毒程式)
2009/8/19        下午 04:00:22        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\11.EXE        Artemis!53DF46B5A6C0 (特洛伊病毒程式)
2009/8/19        下午 04:00:40        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\4.EXE        Artemis!7920497D2674 (特洛伊病毒程式)
2009/8/19        下午 04:00:46        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\5.EXE        Artemis!F338407AE158 (特洛伊病毒程式)
2009/8/19        下午 04:00:53        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\6.EXE        Artemis!776CC93C7F8C (特洛伊病毒程式)
2009/8/19        下午 04:00:59        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\7.EXE        Artemis!2B813FB4B1C1 (特洛伊病毒程式)
2009/8/19        下午 04:01:05        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\8.EXE        Artemis!FF3095011C45 (特洛伊病毒程式)
2009/8/19        下午 04:01:11        沒有執行任何動作（清除失敗）         Administrator        ODS        G:\Viruses\2.rar\9.EXE        Artemis!60094C08D968 (特洛伊病毒程式)

Submitted to McAfee Avert Labs